Embedwell for Confluence: Privacy Policy
Effective date: October 1, 2026 Publisher: Great Work LLC, 651 N Broad St Suite 206, Middletown, DE 19709, USA Contact: hello@greatwork.company
This policy explains what information the Embedwell app for Confluence Cloud (the "App") processes, where it is kept, and your rights. It covers only the App. It does not cover Atlassian's products, which are governed by Atlassian's own privacy policy.
1. Summary
- The App runs entirely on Atlassian's Forge platform ("Runs on Atlassian"). It has no servers of its own and sends no data to Great Work or to any third party.
- Embeds cannot send data anywhere either: the browser blocks every network request and every external resource inside an embed.
- Great Work LLC cannot see your Confluence content, including the HTML, CSS and JavaScript in your embeds.
- The App itself stores only your site's Embedwell settings, a signing key, and an activity log of saves and settings changes, in your own site's Forge app storage.
2. What the App processes
| Data | Why | Where it lives |
|---|---|---|
| The HTML, CSS and JavaScript of each embed, its options, and its approval (signer account id, time, signature) | To render the embed and decide what it may do | Stored by Confluence as part of your page (macro parameters), not by the App |
| Page attachments an embed uses | Read in the reader's browser as that reader, to render the embed | Stay in Confluence; not copied or stored by the App |
| Admin settings (editor groups, script, form and dialog policy, space keys, height cap) | To apply your policy | Forge app storage on your site |
| A signing key | To sign and verify approvals | Forge secret storage on your site |
| Activity log: Atlassian account id, time, action, page id, space key, a short description (label, size, requested permissions) | So admins can see who saved embeds and changed settings | Forge app storage on your site, last 300 entries |
| Group membership of the person saving (only when editing is limited to groups) and whether they are a Confluence admin | To check the editor policy | Read at the time of the check, not stored |
| Display names for the activity log | To show names instead of account ids to admins | Read when the admin page opens, not stored |
The App does not collect email addresses, IP addresses, passwords, API tokens, payment
information or analytics. It sets no cookies and loads no third-party scripts, styles or fonts.
Inside an embed, localStorage and sessionStorage are in-memory only and disappear when the
page is reloaded.
3. Where data is stored
Settings, the signing key and the activity log are stored by Atlassian in Forge storage associated with your Confluence site, subject to Atlassian's data residency settings for Forge apps. Atlassian is the hosting provider and acts as a subprocessor under Atlassian's terms. Great Work LLC uses no other subprocessors for the App.
4. Who can access it
- People on your site: embeds are part of your pages and follow your Confluence permissions. Only Confluence admins can open the Embedwell settings and activity log.
- Great Work LLC: no access to App storage or your content. If you open a support request, we only see what you choose to send us.
- Atlassian: as the platform operator, under Atlassian's privacy policy.
5. Retention and deletion
Settings and the signing key remain until an admin changes them or the App is uninstalled; the activity log keeps the latest 300 entries. Uninstalling removes app storage according to Atlassian's Forge data deletion process. Your embeds remain in your pages after uninstalling (Confluence shows them as an unavailable app until you remove them).
6. Support requests
If you contact support through our help desk or by email, we process the information you send (name, email, message, attachments) only to answer you. Support data is kept for up to 24 months and then deleted. You may ask us to delete it sooner.
7. Your rights
Depending on where you live (for example the EU/UK GDPR or US state privacy laws), you may have the right to access, correct, delete or port personal data, and to object to processing. The activity log holds Atlassian account ids; a Confluence admin can reset it on request, or email hello@greatwork.company and we will explain how. We respond within 30 days. For support data, Great Work LLC is the controller.
8. Security
The App uses only Atlassian-hosted compute and storage, declares no external network access, renders every embed in a sandboxed frame with an opaque origin and a strict Content Security Policy, signs approvals with a per-site key, and never inserts embed markup into its own pages. Report vulnerabilities to hello@greatwork.company.
9. Children
The App is a business tool and is not directed to children under 16.
10. Changes
We will post changes on this page and update the effective date. Material changes will also be announced in the App's release notes on the Marketplace.
11. Contact
Great Work LLC, 651 N Broad St Suite 206, Middletown, DE 19709, USA. hello@greatwork.company